Specifications

14 Click Install.
Installation might take several minutes. Multiple progress bars appear during the installation of the
selected components.
What to do next
Review the topics in Chapter 5, “After You Upgrade vCenter Server,” on page 127 for other postupgrade
actions you might want to take.
Add a vCenter Single Sign-On Identity Source
Users can log in to vCenter Server only if they are in a domain that has been added as a vCenter Single Sign-
On identity source. vCenter Single Sign-On administrator users can add identity sources from the
vSphere Web Client.
An identity source can be a native Active Directory (Integrated Windows Authentication) domain or an
OpenLDAP directory service. For backward compatibility, Active Directory as an LDAP Server is also
available.
Immediately after installation, the following default identity sources and users are available:
localos
All local operating system users. These users can be granted permissions to
vCenter Server. If you are upgrading, those users who already have
permissions keep those permissions.
vsphere.local
Contains the vCenter Single Sign-On internal users.
Procedure
1 Log in to the vSphere Web Client as [e-mail] or as another user with vCenter Single
Sign-On administrator privileges.
2 Browse to Administration > Single Sign-On > Configuration.
3 On the Identity Sources tab, click the Add Identity Source icon.
4 Select the type of identity source and enter the identity source settings.
Option Description
Active Directory (Integrated
Windows Authentication)
Use this option for native Active Directory implementations. See “Active
Directory Identity Source Settings,” on page 105.
Active Directory as an LDAP Server
This option is available for backward compatibility. It requires that you
specify the domain controller and other information. See “Active Directory
LDAP Server and OpenLDAP Server Identity Source Settings,” on
page 105.
OpenLDAP
Use this option for an OpenLDAP identity source. See “Active Directory
LDAP Server and OpenLDAP Server Identity Source Settings,” on
page 105.
LocalOS
Use this option to add the local operating system as an identity source.
You are prompted only for the name of the local operating system. If you
select this option, all users on the specified machine are visible to vCenter
Single Sign-On, even if those users are not part of another domain.
NOTE If the user account is locked or disabled, authentications and group and user searches in the
Active Directory domain will fail. The user account must have read-only access over the User and
Group OU, and must be able to read user and group attributes. This is the default Active Directory
domain configuration for user permissions. VMware recommends using a special service user.
5 If you configured an Active Directory as an LDAP Server or an OpenLDAP identity source, click Test
Connection to ensure that you can connect to the identity source.
vSphere Upgrade
104 VMware, Inc.